$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/6a979d4f-d85c-3b15-966d-2651bd274e81.roa File: 6a979d4f-d85c-3b15-966d-2651bd274e81.roa (raw, json) Hash identifier: tYXcgNgeTPBZFRPvto0goCjPw29Cn0wK3eTT/RgrDtE= Subject key identifier: 46:16:F3:0A:1D:9B:1D:5F:89:54:FE:12:4D:FD:AF:05:17:73:5C:F6 Certificate issuer: /CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d Certificate serial: 010D0C9F43285849B6DF5BE35328804175D27880 Authority key identifier: E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/6a979d4f-d85c-3b15-966d-2651bd274e81.roa Signing time: Fri 02 May 2025 01:00:47 +0000 ROA not before: Fri 02 May 2025 01:00:47 +0000 ROA not after: Thu 31 Jul 2025 01:00:47 +0000 asID: 174 IP address blocks: 65.168.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b6:df:5b:e3:53:28:80:41:75:d2:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d Validity Not Before: May 2 01:00:47 2025 GMT Not After : Jul 31 01:00:47 2025 GMT Subject: CN=6b6a7c7a-6fe0-4eee-984b-82fee41b68fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e0:3c:e2:4c:95:6f:51:d0:e0:1f:c9:a8:1b: 93:e1:e2:37:fc:a1:1b:00:7f:47:2e:5b:e1:16:ff: 93:19:c5:9f:29:9c:e6:87:b5:fd:99:96:9c:95:30: c5:b8:6b:db:ea:0d:57:25:3a:b1:9a:a7:2a:49:fd: 86:7c:b5:20:cb:a3:d0:9d:56:ba:76:c1:0f:a6:cc: d7:d7:fb:df:d3:82:0b:09:11:4c:68:5c:8d:d0:5a: 68:2d:d7:80:c6:94:c5:e8:94:6a:78:7e:10:c1:80: 05:78:af:0f:d3:b3:92:74:32:10:a4:ad:88:bc:1d: c9:96:23:b0:3f:02:ac:bb:f2:b4:1b:97:9f:0e:b5: 99:a7:60:72:3b:4d:aa:01:9d:8a:da:4d:75:66:da: 4d:f4:ea:26:ab:cb:17:61:c4:cf:5e:b9:a6:b1:52: 90:51:c6:51:54:9e:cd:54:6d:e3:5f:02:00:91:68: 23:ac:f3:cf:c2:be:13:ac:ad:40:41:5a:c2:65:b7: 0a:6d:d8:30:13:09:c2:5c:ce:07:01:37:c2:fe:78: 59:1c:80:76:d0:3b:cc:8f:e3:0f:29:52:54:82:7e: f1:9d:94:a7:2a:8c:a8:40:de:ae:e2:06:97:f6:9e: f9:69:0b:cc:39:41:32:d3:69:ef:d0:5d:16:41:52: 94:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:16:F3:0A:1D:9B:1D:5F:89:54:FE:12:4D:FD:AF:05:17:73:5C:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/6a979d4f-d85c-3b15-966d-2651bd274e81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl X509v3 Authority Key Identifier: keyid:E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer sbgp-ipAddrBlock: critical IPv4: 65.168.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:7f:12:40:f0:65:4f:f6:6c:aa:dc:fa:1f:8b:85:4a:6f:35: 0c:98:6e:0c:6b:51:3d:0a:23:31:df:90:f1:ee:cb:3d:a3:98: 23:3a:81:a9:84:bd:81:7e:2d:05:8d:4d:2a:97:64:b9:b1:21: 92:d4:d4:d0:a1:5c:bd:e8:b3:9f:7a:77:0b:63:28:2b:13:f4: d2:e3:6c:70:b2:41:69:ba:d5:71:b5:2c:09:16:65:c3:49:a7: bf:2f:1b:7d:12:a5:37:af:0b:88:69:5e:e8:08:eb:2d:f8:2b: a5:d4:cd:e2:a3:df:89:45:60:66:60:f1:b1:b0:f8:f6:c5:8c: e8:7b:23:41:0c:42:00:9a:2c:e5:33:5e:d8:68:a5:c7:3a:a2: a5:82:7f:c7:00:cb:e4:0d:ba:6f:85:c6:23:80:8e:7d:b8:96: db:79:a6:41:65:da:86:7d:6f:3a:de:71:f2:40:33:68:0f:a5: c3:8c:69:0e:21:ad:85:3e:33:17:bb:44:9d:b8:d8:ef:83:ec: 02:97:7c:62:5a:0a:35:b8:87:cf:5e:00:ff:f8:7a:38:8f:ab: 4b:fe:e2:5a:5c:c4:bf:e3:a5:07:1f:10:f8:29:72:17:8c:88: 92:bb:40:ff:de:cd:11:20:19:97:20:05:ea:af:97:2a:3d:2c: 57:81:cc:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm231vjUyiAQXXSeIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWNkZjFiZGMtNTRmZC00NjM0LWIwMWQtYzZiMmViMjJk ZjZkMB4XDTI1MDUwMjAxMDA0N1oXDTI1MDczMTAxMDA0N1owLzEtMCsGA1UEAxMk NmI2YTdjN2EtNmZlMC00ZWVlLTk4NGItODJmZWU0MWI2OGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseA84kyVb1HQ4B/JqBuT4eI3/KEbAH9HLlvh Fv+TGcWfKZzmh7X9mZaclTDFuGvb6g1XJTqxmqcqSf2GfLUgy6PQnVa6dsEPpszX 1/vf04ILCRFMaFyN0FpoLdeAxpTF6JRqeH4QwYAFeK8P07OSdDIQpK2IvB3JliOw PwKsu/K0G5efDrWZp2ByO02qAZ2K2k11ZtpN9Oomq8sXYcTPXrmmsVKQUcZRVJ7N VG3jXwIAkWgjrPPPwr4TrK1AQVrCZbcKbdgwEwnCXM4HATfC/nhZHIB20DvMj+MP KVJUgn7xnZSnKoyoQN6u4gaX9p75aQvMOUEy02nv0F0WQVKUtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEYW8wodmx1fiVT+Ek39rwUXc1z2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85Y2Rm MWJkYy01NGZkLTQ2MzQtYjAxZC1jNmIyZWIyMmRmNmQvNmE5NzlkNGYtZDg1Yy0z YjE1LTk2NmQtMjY1MWJkMjc0ZTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWNkZjFiZGMtNTRmZC00NjM0LWIw MWQtYzZiMmViMjJkZjZkLzljZGYxYmRjLTU0ZmQtNDYzNC1iMDFkLWM2YjJlYjIy ZGY2ZC5jcmwwHwYDVR0jBBgwFoAU6H7MV4UVtPTqWZhgnk9l+3ulRnIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85Y2RmMWJkYy01NGZkLTQ2MzQtYjAxZC1jNmIy ZWIyMmRmNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQagQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGp/EkDwZU/2bKrc+h+LhUpvNQyYbgxrUT0KIzHfkPHuyz2jmCM6gamE vYF+LQWNTSqXZLmxIZLU1NChXL3os596dwtjKCsT9NLjbHCyQWm61XG1LAkWZcNJ p78vG30SpTevC4hpXugI6y34K6XUzeKj34lFYGZg8bGw+PbFjOh7I0EMQgCaLOUz Xthopcc6oqWCf8cAy+QNum+FxiOAjn24ltt5pkFl2oZ9bzrecfJAM2gPpcOMaQ4h rYU+Mxe7RJ242O+D7AKXfGJaCjW4h89eAP/4ejiPq0v+4lpcxL/jpQcfEPgpcheM iJK7QP/ezREgGZcgBeqvlyo9LFeBzJc= -----END CERTIFICATE-----Generated at Fri May 9 02:59:54 2025 by rpki-client